Encryption and decryption operations are exclusively performed within the platform’s application layer via the key management service (AWS Secrets Manager / KMS). No external processes have direct access to encrypted data stores without going through application-level authentication and decryption controls.
Are Loyalife integrations encrypted with HTTPS and OAuth?
Yes. Xoxoday Loyalife secures all external integrations end-to-end with TLS 1.2+, signed API keys, and OAuth or SSO/SAML authentication.
Is loyalty program data encrypted in Xoxoday Loyalife?
Yes. Xoxoday Loyalife encrypts all data at rest with AES-256 and in transit with TLS 1.2+, meeting ISO 27001 and SOC 2 Type II requirements.